Notices by Soatok Dreamseeker (soatok@furry.engineer)

https://soatok.blog/2026/07/15/the-long-tail-of-work-left-until-activitypub-has-e2ee

@gnu2 Hope isn't worthless, but it isn't a fucking strategy.

"Hope for the best" is usually preceded by "prepare for the worst" for a reason. That preparation is where strategy comes in.

The worst offenders are the sovereignty-pilled European tech bros who think plaintext-in-Europe is just fine.

I argue that well-implemented cryptography ia resilient even when your governments go more authoritarian. Hope isn't a strategy.

Me: "All the so-called private messaging apps have inferior cryptography engineering and need to step up their game. It kind of sucks that Signal is the only game in town that has decent e2ee. We can do better. The community just has to have higher standards and stop settling for bad designs."

Random people: "Signal shill"

@david_chisnall I use a Skyrim patch that lets me wear 10 rings whenever I play for this exact reason lol

Alright, it's official! 💰

@matthew_d_green and I bet on what will break first, ML-KEM-768 or X25519. The loser donates to a 501(c)(3) picked by the winner.

If you have an opinion on quantum computers or lattices, you can join with a side bet. Just submit a PR!

https://github.com/FiloSottile/ecc-vs-lattices-long-bet

@erkhyan Of course.

In some games, humans can wear two rings and a neck piece with enchantments.

Furries should have a fourth accessory slot: A sort of bangle at the base of their tail.

@soatok

The NSA is handicapped by being a dual-mission agency. The same organisation is responsible for:

• Making sure that the USA's signals are secure.
• Making sure that no other country's signals are secure from the USA.

These are in obvious tension when the USA and everyone else are using the same off-the-shelf standards and implementations of those standards.

I'm generally happy that they now prioritise the former over the latter, if only because they now know that there is a good chance that any weakness that they put in will be exploited by the Chinese, but I'd be a lot more comfortable if they properly separated the two concerns.

I am still curious about Heartbleed because a lot of the US government was vulnerable and I know the NSA did some review of OpenSSL, so I don't know which of the following options was true:

• They didn't bother to review a core piece of security-critical software that a lot of the government's security depended on (I have some evidence that it wasn't this one).
• They did review it and missed a really important bug.
• They did review it, found the bug, and made a staggeringly bad call about whether it was better to fix the bug or keep it as a thing to attack other people with.

None of these possibilities makes them look especially competent.

@pq1r @drwho Yeah, everyone has privately told me he's not a bad guy.

@drwho Orr is, apparently, generally positively regarded by my peers. Their email (but mostly the IETF thread that preceded it) just struck me the wrong way.

@schrotthaufen @sophieschmieg @nlupo 100% of it

@pq1r @christopherkunz Well, if you shift each letter of "DJB" one place to the right, you get "CIA". Illuminati confirmed dot gif

@spiosra Either that, or people who get screenshotted a lot on /r/IAmVerySmart :P

There are very intelligent and passionate engineers, cryptographers, and analysts that vehemently disagree with my conclusions about the Hybrid debate. That's okay!

But Bernstein summoned a mob of ill-informed people with messages designed to alarm them into action.

Every one of these agencies has a mission and a budget. To your or I, that budget might seem like "damn near infinite", but they still have constraints.

NSA has two missions. Everyone knows about SIGINT because of Snowden, but they also have a competing mission called COMINT.

You can, very loosely, map these two terms to "red team" and "blue team".

If NSA knew a top secret way to break ML-KEM and were fairly confident that no other country has thought of it, there is no way in hell the SIGINT people could get the COMINT people to agree on a plan to migrate the entire federal fucking government to use ML-KEM. It doesn't line up with their self-interest.

Like, I am NOT a fan of the NSA, in the same way that I'm not a fan of Meta, Palantir, and the data broker industry.

Surveillance is bad for society. Privacy is good for society. Using technology to undermine privacy and surveil people is a bad thing, actually. And while the official story is roughly that NSA only spies on other governments, and not innocent civilians, we have no way of knowing if that's true. And there's no way in hell I'll ever trust that.

So, like most cryptographers, I'm squarely in the "Fuck the NSA" camp. Just like I'm in the "Fuck the FSB" camp. And every other nation state's equivalent agency is on that list too.

But spy agencies aren't fucking magical. They can't violate information theory, physics, or causality.

They also aren't omniscient about mathematics, logic, or software vulnerabilities. If they were, they wouldn't have competition. And they can't wave a magic wand and get enthusiastic cooperation from international forums of cryptology experts. That's ridiculous.

@christopherkunz Yeah. Reasonable people can disagree on Pure PQ vs Hybrid PQ, but summoning unreasonable shit-stirrers into the thread is a huge waste of everyone's time and energy.

https://mailarchive.ietf.org/arch/msg/tls/T7z8M-wL_2nOpbJtehTqtGYjuWg/

This TLS thread is full of some of the dumbest fucking opinions I've read in a technical discussion in years.

https://datatracker.ietf.org/doc/draft-ietf-mls-pq-ciphersuites/

The latest RFC draft includes the ciphersuite I recommend for ActivityPub E2EE :3